$ rpki-client -vvvf rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/9QUCEFXG3GyL2houHyfy9R52WOU.mft File: 9QUCEFXG3GyL2houHyfy9R52WOU.mft (raw, json) Hash identifier: xBUDNktKWKsSxVukLomTryO/HqYC2XUDMc9KkfFO9sE= Subject key identifier: 11:88:4F:C4:6D:81:26:96:A1:B4:95:A8:A1:A0:36:FC:74:B7:0F:43 Authority key identifier: F5:05:02:10:55:C6:DC:6C:8B:DA:1A:2E:1F:27:F2:F5:1E:76:58:E5 Certificate issuer: /CN=A917778D/serialNumber=F505021055C6DC6C8BDA1A2E1F27F2F51E7658E5 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9QUCEFXG3GyL2houHyfy9R52WOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/9QUCEFXG3GyL2houHyfy9R52WOU.mft Manifest number: 0E Signing time: Fri 13 Nov 2026 09:20:05 +0000 Manifest this update: Fri 13 Nov 2026 09:20:04 +0000 Manifest next update: Fri 20 Nov 2026 09:20:04 +0000 Files and hashes: 1: 9QUCEFXG3GyL2houHyfy9R52WOU.crl (hash: myUq/FQCpChRmCUc/7lBvKHkjd5Bzr4uKAVfu2sf2tw=) 2: 07FC1866CE0211F1A5FD3EB60F66CEF9.roa (hash: S7Cq6Z48bF/WmdJmYAk7dw3LrKxw/zvp97GFPRY0fSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/9QUCEFXG3GyL2houHyfy9R52WOU.crl rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/9QUCEFXG3GyL2houHyfy9R52WOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9QUCEFXG3GyL2houHyfy9R52WOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 09:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917778D, serialNumber=F505021055C6DC6C8BDA1A2E1F27F2F51E7658E5 Validity Not Before: Nov 13 09:20:04 2026 GMT Not After : Nov 20 09:20:04 2026 GMT Subject: CN=6af6d644-abb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:07:40:d9:e1:95:21:21:1f:81:f0:b7:6b: 8b:da:6f:20:44:28:d1:23:0e:7f:0a:c1:46:6c:cb: e5:e4:eb:08:d7:96:f9:59:da:3f:bb:00:55:ef:b3: c6:85:65:68:71:6d:54:6c:02:6d:a2:7c:50:06:32: 45:72:75:57:04:7e:82:93:48:2d:fc:0e:6d:0d:81: df:9a:b1:9d:4f:da:4f:84:14:3f:b3:7f:c9:a9:9b: 17:a1:bb:f1:d8:02:25:63:cf:c4:d9:9d:0a:8f:f4: 76:a8:f3:6a:d3:3b:b1:8f:29:dc:3a:1e:ed:52:9f: f7:bb:d9:e2:1e:a7:35:3d:d1:0f:8a:8d:12:cd:2b: 93:a7:a3:5a:56:4f:d5:32:a3:50:dc:91:e5:cc:7c: 22:1c:9b:49:b0:53:19:aa:68:64:29:16:3d:62:16: b7:88:dd:b7:64:5f:0d:cd:12:de:7e:46:71:3a:4f: 98:9e:dd:ea:f7:68:40:2d:e8:9e:d4:35:af:38:0c: fe:3b:38:ea:3c:f7:2a:b5:f1:0c:b3:51:15:e7:02: cc:fe:81:bb:74:35:52:d4:27:c6:c5:46:ec:54:16: 97:8a:cd:cc:04:1f:77:f4:92:53:6e:1d:e8:ce:25: ec:ef:fc:1e:5d:5b:96:cf:20:57:de:33:19:b1:a1: 83:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:4F:C4:6D:81:26:96:A1:B4:95:A8:A1:A0:36:FC:74:B7:0F:43 X509v3 Authority Key Identifier: keyid:F5:05:02:10:55:C6:DC:6C:8B:DA:1A:2E:1F:27:F2:F5:1E:76:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/9QUCEFXG3GyL2houHyfy9R52WOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9QUCEFXG3GyL2houHyfy9R52WOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/9QUCEFXG3GyL2houHyfy9R52WOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ec:d0:f7:f2:ee:54:13:b7:57:6e:1e:da:e1:3b:95:c3:18: af:4b:28:ea:a4:2e:ba:51:c9:83:b5:c0:e4:c8:ec:31:61:da: 0e:bb:55:3f:ae:3d:ea:89:89:93:2d:1e:4a:99:38:08:53:67: 21:84:91:34:20:e4:36:c1:2e:1a:b2:e0:fb:87:0a:02:b7:90: 87:eb:4f:6b:40:c5:58:70:b0:e7:5d:ac:f6:65:13:50:db:0e: 42:07:db:c6:60:7b:bb:88:bb:81:38:8e:55:aa:7b:c8:7a:cf: ce:2b:bb:83:a7:11:0a:08:fe:58:85:6b:0c:14:89:b8:62:71: 3b:f2:7e:0c:ee:8c:3a:5c:8e:4c:47:29:47:1f:87:41:ab:3b: f7:1d:78:8d:b9:1d:84:7b:7f:7e:e0:8c:62:40:f2:2b:0c:20: 12:36:ed:6e:ba:e3:ad:d9:c7:26:9f:f7:58:3f:58:44:0a:00: 77:f0:8a:24:2b:38:31:98:3c:3b:d7:60:ea:86:d0:13:ba:f7: 45:35:2a:09:0c:74:64:85:8b:c5:45:45:52:1b:f9:8f:db:fa: 1f:b2:ba:8c:2f:6f:d4:ae:5c:00:95:ac:09:93:89:bd:7f:d3: 5e:6f:1b:4b:70:3c:f2:55:02:5a:3f:59:d9:6b:b3:12:7d:5e: 88:5e:1a:77 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzc4RDExMC8GA1UEBRMoRjUwNTAyMTA1NUM2REM2QzhCREExQTJFMUYyN0YyRjUx RTc2NThFNTAeFw0yNjExMTMwOTIwMDRaFw0yNjExMjAwOTIwMDRaMBgxFjAUBgNV BAMTDTZhZjZkNjQ0LWFiYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX4gdA2eGVISEfgfC3a4vabyBEKNEjDn8KwUZsy+Xk6wjXlvlZ2j+7AFXvs8aF ZWhxbVRsAm2ifFAGMkVydVcEfoKTSC38Dm0Ngd+asZ1P2k+EFD+zf8mpmxehu/HY AiVjz8TZnQqP9Hao82rTO7GPKdw6Hu1Sn/e72eIepzU90Q+KjRLNK5Ono1pWT9Uy o1DckeXMfCIcm0mwUxmqaGQpFj1iFreI3bdkXw3NEt5+RnE6T5ie3er3aEAt6J7U Na84DP47OOo89yq18QyzURXnAsz+gbt0NVLUJ8bFRuxUFpeKzcwEH3f0klNuHejO Jezv/B5dW5bPIFfeMxmxoYOlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEYhPxG2B JpahtJWooaA2/HS3D0MwHwYDVR0jBBgwFoAU9QUCEFXG3GyL2houHyfy9R52WOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NzhEL0Y2RDNENkJBQ0Uw MDExRjFBQUY5ODRCRDBFNjZDRUY5LzlRVUNFRlhHM0d5TDJob3VIeWZ5OVI1MldP VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOVFVQ0VGWEczR3lMMmhvdUh5Znk5UjUyV09VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 NzhEL0Y2RDNENkJBQ0UwMDExRjFBQUY5ODRCRDBFNjZDRUY5LzlRVUNFRlhHM0d5 TDJob3VIeWZ5OVI1MldPVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBl7ND38u5UE7dXbh7a4TuVwxivSyjqpC66UcmDtcDkyOwxYdoOu1U/rj3qiYmT LR5KmTgIU2chhJE0IOQ2wS4asuD7hwoCt5CH609rQMVYcLDnXaz2ZRNQ2w5CB9vG YHu7iLuBOI5VqnvIes/OK7uDpxEKCP5YhWsMFIm4YnE78n4M7ow6XI5MRylHH4dB qzv3HXiNuR2Ee39+4IxiQPIrDCASNu1uuuOt2ccmn/dYP1hECgB38IokKzgxmDw7 12DqhtATuvdFNSoJDHRkhYvFRUVSG/mP2/ofsrqML2/UrlwAlawJk4m9f9NebxtL cDzyVQJaP1nZa7MSfV6IXhp3 -----END CERTIFICATE-----Generated at Sun Nov 15 08:04:40 2026 by rpki-client